How to Fill Out and Submit the Prospect Medical Group Authorization Form

The Prospect Medical Group authorization form is the written consent that lets the provider release your protected health information to a person or organization you name. Without a valid, signed form on file, HIPAA bars the medical records department from sharing anything.¹ Done correctly, the form moves your records to a new doctor, a lawyer, an insurer, or back to you.

What to Gather Before You Start

Most rejected forms fail on missing information, not on anything complicated. Pull these together first:

Your full legal name as it appears on your ID, your date of birth, and your Prospect Medical Group member ID number. The member ID matches you to the right file faster than a Social Security number, and many patients prefer to leave the SSN off entirely.
A clear description of the records you want released. “All records” is allowed, but narrowing to specific items (lab results, imaging, visit notes from a defined date range) keeps the scope tight and speeds things up.
The recipient’s full name, mailing address, and phone number. For a law firm or specialist, add the department or attention line so the package lands on the right desk.
A reason for the release. Transfer of care, insurance, personal review, and litigation are typical. If you’d rather not explain, HIPAA accepts “at the request of the individual.”²

What Makes the Form Valid Under HIPAA

Federal regulations list six core elements every authorization must contain. Miss one and the records department has a legitimate reason to reject the request.²

A specific, meaningful description of the information being released — not just “my file.”
The name of the provider or entity releasing the records (Prospect Medical Group or a specific affiliated clinic).
The name or class of persons who will receive the records.
The purpose of the disclosure.
An expiration date or event: a calendar date, or a triggering event such as “upon completion of my disability claim.”
Your signature and the date you signed. An undated signature invalidates the whole authorization.

The form also has to carry three required statements: notice of your right to revoke in writing, a warning that information disclosed may be re-disclosed by the recipient and lose HIPAA protection, and a statement that the provider will not condition treatment or payment on whether you sign.² Prospect’s current form includes these; using an outdated version is a common cause of rejection. Download the latest copy from the member resources page or pick one up at a clinic.³

Filling In Each Section

Print the patient identification section clearly. Errors here cause more delays than anything else, because staff cannot release records if they cannot confirm whose file to pull.

In the records description, be as specific as the situation calls for. Cardiology notes from the past year? Say so. Full history for a new primary care provider? “All medical records” with an open date range is fine. Precision trims the turnaround because staff don’t pull material you never wanted.

Enter the recipient’s full name, address, and phone number. State the purpose. Then fill in the expiration. A calendar date like “December 31, 2026” is the simplest option; an event-based expiration (“upon resolution of my workers’ compensation claim”) also works, as long as the event relates to you or the purpose of the release.²

Sign and date it. HIPAA requires both. Federal law does not require a witness, though an individual facility may ask for one as a matter of policy.

When Someone Signs for You

A parent, legal guardian, or holder of a healthcare power of attorney can sign for the patient. The form must describe that person’s authority, for example “legal guardian per court order dated March 10, 2024,” and the representative should attach supporting documentation such as a copy of the power of attorney or guardianship order.¹ Prospect also offers a separate Designation of Personal Representative Form to establish that status in advance.⁴

Records That Need a Separate Form

Two categories cannot ride along on a general authorization.

Psychotherapy notes are the personal notes a therapist keeps separate from the medical chart. HIPAA requires a standalone authorization for them, and that authorization cannot be combined with one covering any other type of record.⁵ Releasing these notes means filling out a second form dedicated solely to them.⁶

Substance use disorder treatment records fall under a separate federal regulation, 42 CFR Part 2, with confidentiality rules stricter than HIPAA.⁷ A general HIPAA authorization will not cover them. Contact the specific program where you received treatment for its own consent form.

How to Submit It

Send the completed form to Prospect Medical Group’s Medical Records Department. The main corporate office is at 600 City Parkway West, 10th Floor, Orange, CA 92868.⁸ You have several options:

Fax is the fastest paper method. Confirm the current medical records fax number with member services or on the Prospect contact page.
Certified mail gives you tracking and delivery confirmation, which matters if you need proof of when the request arrived.
In person at your clinic. Ask for a date-stamped copy for your own file.
The Patient Neighborhood online portal may allow electronic submission, depending on your plan and clinic.³

Keep a copy of the signed form regardless of how you send it. If a dispute later comes up about what you authorized or when, that copy is your proof.

How Long It Takes and What It Costs

Federal law requires the provider to act on your request within 30 days of receiving it. A single 30-day extension is allowed, but only with a written explanation of the delay and the expected completion date.⁹ California is stricter for standard copy requests, requiring that copies be sent within 15 days.¹⁰

Providers can charge a reasonable, cost-based fee. California permits $0.25 per page plus a reasonable clerical fee.¹¹ For an electronic copy of records already stored electronically, HIPAA allows a flat fee option capped at $6.50 for the entire request, covering labor, supplies, and postage together.¹² Search-and-retrieval fees on top of copy costs are not permitted for patient-initiated requests.

Canceling an Authorization You Already Signed

You can revoke a prior authorization at any time by submitting a written revocation to Prospect Medical Group. It takes effect when the provider receives it, not when you send it.¹³ Any disclosure made before the revocation arrives cannot be undone. The authorization form itself should describe how to submit a revocation; check it for the specific address or fax.

If the Request Is Denied

A provider can deny a records request in limited circumstances and must give you a written explanation. Typical reasons are a form that’s incomplete or unsigned, a missing expiration date, or records the provider doesn’t maintain. If the problem is fixable, correct it and resubmit.

If you believe the denial is improper, you can ask the provider for a second review. Beyond that, you can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, which enforces HIPAA. Complaints must be filed within 180 days of the alleged violation and can be submitted through the OCR complaint portal.¹⁴ Federal information-blocking rules under the 21st Century Cures Act also apply when a provider unreasonably interferes with access to electronic health information.¹⁵

1
eCFR. 45 CFR Part 164 – Security and Privacy
2
eCFR. 45 CFR 164.508 – Uses and Disclosures for Which an Authorization Is Required
3
Prospect Medical Group. Members
4
Prospect Medical Group. Designate Personal Representative
5
eCFR. 45 CFR 164.508 – Uses and Disclosures for Which an Authorization Is Required
6
U.S. Department of Health and Human Services. HIPAA Privacy Rule and Sharing Information Related to Mental Health
7
eCFR. Confidentiality of Substance Use Disorder Patient Records
8
Prospect Medical Group. Contact Us
9
eCFR. 45 CFR 164.524 – Access of Individuals to Protected Health Information
10
California Legislative Information. Health and Safety Code 123110 – Patient Access to Health Records
11
Medical Board of California. Complaint – Medical Records FAQs
12
U.S. Department of Health and Human Services. Is $6.50 the Maximum Amount That Can Be Charged
13
U.S. Department of Health and Human Services. Can an Individual Revoke His or Her Authorization
14
U.S. Department of Health and Human Services. Office for Civil Rights – File a Complaint
15
U.S. Department of Health and Human Services. The HIPAA Privacy Rule